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DETAILED ACTION 

1 . This action is responding to application papers filed 11-21-2003. 

2. Claims 1 - 61 are pending. Claims 1, 20, 31, 34, 49 are independent. 

Response to Arguments 

3. Applicant's arguments filed 9/6/2007 have been fully considered but they are moot 
due to new grounds of rejection. 

Responses Based on Previous Grounds of Rejection: 

3.1 The Nonaka prior art discloses an apparatus for encryption functions with 
cryptographic key capabilities and a license (device) key. (see Nonaka paragraph 
[0019], lines 7-11: data processing apparatus; paragraph [0339], lines 2-6: attached 
host CPU, client, apparatus, license (device) key) Applicant remarks mentions a 
unique key but the term "unique" does not appear anywhere within the specification or 
the original claims. There is no disclosure in the specification or the original claims that 
the device key is unique. 

The Nonaka prior art discloses the capability for the usage of content data to be 
tracked. The usage of content is tracked and logged by the Nonaka prior art. 
(see Nonaka paragraph [0053], lines 23-27: track content usage) 

The Nonaka prior art discloses playback capability. There is no indication of 
placing a limitation or restriction on the playback capabilities of content data. The 
unlimited playback of content data is disclosed, (see Nonaka paragraph [0362], lines 1- 
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2; paragraph [0477], lines 1-3: unrestricted (unlimited) playback capabilities) 

Applicant is reminded that the test for obviousness is not whether the features of a 
secondary reference may be bodily incorporated into the structure of the primary 
reference; nor is it that the claimed invention must be expressly suggested in any one or 
all of the references. Rather, the test is what the combined teachings of the references 
would have suggested to those of ordinary skill in the art. See In re Keller, 642 F.2d 
413, 208 USPQ 871 (CCPA 1981). 

Furthermore, in response to applicant's arguments against the reference 
individually, one cannot show nonobviousness by attacking references individually 
where rejections are based on combinations of references. See In re Keller, 642 F.2d 
413, 208 USPQ 871 (CCPA 1981); In re Merck & Co., 800 F.2d 1091, 231 USPQ 375 
(Fed. Cir. 1986). 

The Nonaka and Chase prior art combination discloses the capability for content 
data revocation (disabling) as presented within the claimed limitation, (see Chase col. 3, 
lines 60-63: usage request; col. 4, lines 10-16; col. 33, lines 54-56; col. 33, lines 60-63; 
col. 34, lines 4-9: content compromised, content disabled, access permitted only if 
content is not disabled) The Chase prior art is in an analogous field of endeavor, which 
is the field of content data access management and its protection based on access 
rights. Any additional functions do not remove the fact that the referenced prior art 
discloses the revocation or disabling of content data. 

The Serret-Avila prior art is in the same field of endeavor as the claimed invention. 
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The Serret-Avila prior art concerns systems and methods for authenticating and 
protecting the integrity of electronic information (content data) using cryptographic 
techniques. The generation of a hash is a cryptographic technique and utilized in the 
claimed invention. Authentication is the application of access rights to electronic 
information or content data to determine the scope of access and utilized in the claimed 
invention. 

3.2 The examiner has considered the applicant's remarks concerning a system 
wherein an integrity hash is obtained of rights information stored at a client device and 
associated with content stored at the client device. The integrity hash is encrypted using 
a client device key to generate an encrypted hash. The client device key is externally 
inaccessible from the client device. The encrypted hash is stored on the client device. 
Applicant's arguments have thus been fully analyzed and considered but they are not 
persuasive. 

After an additional analysis of the applicant's invention, remarks, and a search of 
the available prior art, it was determined that the current set of prior art consisting of 
Nonaka (20030046238), Serret-Avila (6,959,384), Chase (7,080,043), Hall (7,062,500), 
and Thoma (20020152393) discloses the applicant's invention including disclosures in 
Remarks dated September 6, 2007. 

Claim Rejections - 35 USC § 103 

4. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 
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a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in section 
102 of this title, if the differences between the subject matter sought to be patented and the prior art are such that the 
subject matter as a whole would have been obvious at the time the invention was made to a person having ordinary 
skill in the art to which said subject matter pertains. Patentability shall not be negatived by the manner in which the 
invention was made. 

5. Claims 1 - 4, 8, 9, 11 - 24, 26 - 31, 34 - 39, 41, 42, 44 - 52, 54, 56, 57, 59, 61 are 
rejected under 35 U.S.C. 103(a) as being unpatentable over Nonaka et al. (US PGPUB 
No. 20030046238) in view of Hall et al. (US Patent No. 7,062,500) and further in view of 
Thoma et al. (US PGPUB No. 20020152393). 

Regarding Claim 1, Nonaka discloses a method comprising: 

c) storing the encrypted hash on the client device, (see Nonaka paragraph [0246], 
lines 1-4: storage circuit for encrypted content key data; paragraph [0019], lines 
1-6; paragraph [0019], lines 7-11: data processing apparatus; paragraph [0339], 
lines 2-6: attached host CPU, client) 

Nonaka discloses wherein obtaining an integrity hash of rights information stored at 
a client device, said rights information being associated with content stored at the 
client device; (see Nonaka paragraph [0019, lines 1-6; paragraph [0019], lines 7-11; 
paragraph [0027], lines 1-7: generate (i.e. obtain) integrity hash using UCP (i.e. 
rights) information; paragraph [0246], lines 1-4: storage circuit for encrypted content 
key data; paragraph [0019], lines 1-6; paragraph [0019], lines 7-11: data processing 
apparatus; paragraph [0339], lines 2-6: attached host CPU, client; paragraph [0192], 
lines 1-5; paragraph [0239], lines 1-3: data storage) Nonaka does not specifically 
disclose whereby rights information stored in a clear form. 
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However, Hall discloses: 

a) obtaining an integrity hash of rights information stored in a clear form at a client 
device, (see Hall col. 2, lines 7-14; col. 6, lines 12-16; col. 6, lines 28-32: digital 
rights management; col. 6, lines 19-22: clear form storage of digital rights 
information) 

It would have been obvious to one of ordinary skill in the art to modify Nanaka 
as taught by Hall to enable the capability for the storage of digital rights information 
in clear form. One of ordinary skill in the art would have been motivated to employ 
the teachings of Hall in order to enable the capability to ensure data structure 
integrity, flexibility, interoperability in the management of digital rights information, 
(see Hall col. 1 , lines 34-37: "... The present invention also provides techniques for 
providing rights management data structure integrity, flexibility, interoperability, user 
and system transparency, and compatibility. ... ') 

Nonaka-Hall discloses wherein encrypting the integrity hash using a client device 
key to generate an encrypted hash, said client device key being externally 
inaccessible from the client device; (see Nonaka paragraph [0026], lines 21-25: 
encryption utilized UCP (i.e. rights) information; paragraph [0036], lines 1-4: license 
(i.e. device) keys utilized; paragraph [0346], lines 5-8) Nonaka-Hall does not 
specifically discloses whereby device key being externally inaccessible from the 
client device. 

However, Thoma discloses: 
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b) device key being externally inaccessible from the client device; (see Thoma 
paragraph [0005], lines 1-3: content distribution; paragraph [0031], lines 15-21; 
paragraph [0033], lines 5-9; paragraph [0033], lines 11-12: inaccessible key) 

It would have been obvious to one of ordinary skill in the art to modify Nonaka- 
Hall as taught by Thoma to enable the capability for an inaccessible key. One of 
ordinary skill in the art would have been motivated to employ the teachings of 
Thoma in order to enable the capability for the selection of the terminal device to 
receive distribute digital content from a wide variety of devices, (see Thoma 
paragraph [0012], lines 7-13: "... The invention also allows free selection of the 
terminal device on which content is consumed. That is, the invention enables a wide 
variety of devices to distribute digital content to. The invention also provides a 
system that allows for transferring content from one terminal device to another, while 
still protecting the rights of the copyright owner. . . . ") 

Regarding Claims 2, 35, 50, Nonaka discloses the method of claim 1 wherein 
obtaining the integrity hash comprises: receiving the integrity hash from a server device, 
(see Nonaka paragraph [0476], lines 1-4; paragraph [0525], lines 3-6: receive hash, 
UCP (i.e. rights) information; paragraph [0019], lines 1-6; paragraph [0019], lines 7-11: 
data processing apparatus; paragraph [0339], lines 2-6: attached host CPU, server) 

Regarding Claims 3, 36, 51, Nonaka discloses the method of claim 1 wherein 
obtaining the integrity hash comprises: generating the integrity hash on the client 
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device, (see Nonaka paragraph [0027], lines 1-7: generate hash; paragraph [0019], 
lines 1-6; paragraph [0019], lines 7-11: data processing apparatus; paragraph [0339], 
lines 2-6: attached host CPU, client) 

Regarding Claims 4, 37, 52, Nonaka discloses the method of claim 3 wherein 
generating the integrity hash on the client device comprises: 

a) applying the client device key in a combination with the rights information; (see 
Nonaka paragraph [0027], lines 1-5; : license key utilized with UCP (i.e. rights 
information) for hash generation) and 

b) determining the integrity hash from the combination of the rights information and 
the client device key. (see Nonaka paragraph [0027], lines 1-7: license (i.e. 
device) key, UCP (i.e. rights information) utilized to generate (i.e. determine) 
hash) 

Regarding Claims 8, 56, Nonaka discloses the method of claim 1 further comprising: 

a) receiving, at the client device, a content key for the content; (see Nonaka 
paragraph [0026], lines 21-25: receive encryption key) 

b) encrypting the content key using the client device key to generate an encrypted 
content key; (see Nonaka paragraph [0026], lines 21-25: encryption utilized; 
paragraph [0036], lines 1-4: license (i.e. device) key utilized) and 

c) storing the encrypted content key on the client device, (see Nonaka paragraph 
[0246], lines 1-4: storage circuit for encrypted content key data; paragraph 
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[0019], lines 1-6; paragraph [0019], lines 7-11: data processing apparatus; 
paragraph [0339], lines 2-6: attached host CPU, client) 

Regarding Claims 9, 42, 57, Nonaka discloses the method of claim 1 further 
comprising: 

a) generating a validation hash from at least the rights information; (see Nonaka 
paragraph [0019, lines 1-6; paragraph [0019], lines 7-11: data processing 
apparatus (i.e. client device); paragraph [0027], lines, 1-7: generate integrity (i.e. 
validation) hash) 

b) decrypting the encrypted hash to recover the integrity hash; (see Nonaka 
paragraph [0019], lines 1-6; paragraph [0021], lines 3-8: decryption of UCP (i.e. 
rights) information) and 

c) comparing the validation hash to the integrity hash to detect tampering with the 
rights information, (see Nonaka paragraph [0246], lines 4-8: comparison of hash 
values to detect tampering) 

Regarding Claim 11, Nonaka discloses the method of claim 1. (see Nonaka paragraph 
[0246], lines 1-4: storage circuit for UCP (i.e. rights information), and content key data; 
paragraph [0019], lines 1-6; paragraph [0019], lines 7-11: data processing apparatus; 
paragraph [0339], lines 2-6: attached host CPU, client) Nonaka does not specifically 
disclose whereby storing the rights information on the client device in a clear form. 
However, Hall discloses wherein storing the rights information on the client device in a 
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clear form, (see Hall col. 2, lines 7-14; col. 6, lines 12-16; col. 6, lines 28-32: digital 
rights management; col. 6, lines 19-22: clear form storage of digital rights information) 
It would have been obvious to one of ordinary skill in the art to modify Nanaka as 
taught by Hall to enable the capability for the storage of digital rights information in clear 
form. One of ordinary skill in the art would have been motivated to employ the 
teachings of Hall in order to enable the capability to ensure data structure integrity, 
flexibility, interoperability in the management of digital rights information, (see Hall col. 
1, lines 34-37) 

Regarding Claims 12, 60, Nonaka discloses the method of claim 10 further comprising: 
reading the rights information from the client device out to a server device, (see Nonaka 
paragraph [0476], lines 1-4; paragraph [0525], lines 3-6: transfer UCP (i.e. rights) 
information) Nonaka does not specifically disclose whereby reading the rights 
information from the client device in the clear form. However, Hall discloses wherein 
reading the rights information from the client device in the clear form, (see Hall col. 2, 
lines 7-14; col. 6, lines 12-16; col. 6, lines 28-32: digital rights management; col. 6, lines 
19-22: clear form storage of digital rights information) 

It would have been obvious to one of ordinary skill in the art to modify Nanaka as 
taught by Hall to enable the capability for reading the rights information from the client 
device in the clear form. One of ordinary skill in the art would have been motivated to 
employ the teachings of Hall in order to enable the capability to ensure data structure 
integrity, flexibility, interoperability in the management of digital rights information, (see 
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Hall col. 1, lines 34-37) 

Regarding Claims 13, 28, 29, 30, 45, 61, Nonaka discloses the method of claim 1 
wherein the rights information comprise usage information, the method further 
comprising: 

a) tracking usage of the content; (see Nonaka paragraph [0053], lines 23-27: track 
content usage) 

b) updating the rights information with changes in usage; (see Nonaka paragraph 
[0476], lines 1-4; paragraph [0525], lines 3-6: transfer (i.e. update) UCP (i.e. 
rights) information) 

c) regenerating, re-encrypting, and restoring the integrity hash on the client device 
for each update of the rights information, (see Nonaka paragraph [0019, lines 1- 
6; paragraph [0019], lines 7-11: data processing apparatus (i.e. client device); 
paragraph [0027], lines 1-7: re-generate (i.e. generate a second time) integrity 
hash; paragraph [0246], lines 1-4: storage circuit for encrypted UCP (i.e. rights) 
information) 

Regarding Claim 14, Nonaka discloses the method of claim 1 wherein the integrity 
hash comprises a Hash Message Authentication Code (HMAC). (see Nonaka 
paragraph [0027], lines 1-7: generate a hash (i.e. integrity hash) value utilizing 
cryptographic (i.e. encryption/decryption key) procedures in a hash authentication 
processing system) 
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Regarding Claims 15, 46, Nonaka discloses the method of claim 1 wherein the client 
device key comprises a code embedded in hardware of the client device having no 
externally accessible data path, (see Nonaka paragraph [0036], lines 1-4: license (i.e. 
device) key utilized; paragraph [0346], lines 5-8: inaccessible secure device utilized for 
hash generation) 

Regarding Claim 16, Nonaka discloses the method of claim 1 wherein the client device 
comprises at least one of an MP3 player, a personal data assistant, and cellular phone, 
(see Nonaka paragraph [0019], lines 1-6; paragraph [0019], lines 7-11: data processing 
apparatus; paragraph [0339], lines 2-6: attached host CPU, client device such as a 
PDA, cellular phone, or MP3 player (i.e. systems containing CPU)) 

Regarding Claim 17, Nonaka discloses the method of claim 1 further comprising at 
least one of: 

a) downloading the rights information from a server device; (see Nonaka paragraph 
[0476], lines 1-4; paragraph [0525], lines 3-6: transfer (i.e. download) UCP (i.e. 
rights) information) and 

b) installing a storage medium having the rights information stored thereon, (see 
Nonaka paragraph [0537], lines 3-6: place (i.e. install) on recording medium 
containing UCP (i.e. rights) information) 
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Regarding Claim 18, Nonaka discloses the method of claim 1 wherein the rights 
information grant unlimited play for the content on the client device, (see Nonaka 
paragraph [0339], lines 2-6: playback module; paragraph [0346], lines 1-5: playback 
content data) 

Regarding Claim 19, Nonaka discloses the method of claim 3 wherein generating the 
integrity hash comprises generating the integrity hash in trusted hardware, (see Nonaka 
paragraph [0027], lines 1-7: obtain, generate integrity hash: SAM (i.e. trusted, secure 
hardware), generate hash; paragraph [0346], lines 5-8: inaccessible secure, trusted 
device) 

Regarding Claim 20, Nonaka discloses a method comprising: 

a) obtaining a first integrity hash of rights information stored at a client device, said 
rights information being associated with content stored at the client device, said 
first integrity hash having been generated using an external key as an integrity 
secret; (see Nonaka paragraph [0027], lines 1-7: generate (i.e. obtain) integrity 
hash; paragraph [0022], lines 1-5: external, session key utilized) 

b) obtaining a second integrity hash of the rights information; (see Nonaka 
paragraph [0019, lines 1-6; paragraph [0019], lines 7-11: data processing 
apparatus (i.e. client device); paragraph [0027], lines 1-7: re-generate or obtain 
(i.e. a second) integrity hash) 

c) encrypting the second integrity hash using a client device key to generate an 
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encrypted hash, said client device key being externally inaccessible from the 
client device; (see Nonaka paragraph [0026], lines 21-25: encryption utilized; 
paragraph [0036], lines 1-4: license (i.e. device) key utilized; paragraph [0346], 
lines 5-8: inaccessible secure device utilized for hash generation) 
e) storing the encrypted hash at the client device, (see Nonaka paragraph [0246], 
lines 1-4: storage circuit for encrypted content key data storage; paragraph 
[0019], lines 1-6; paragraph [0019], lines 7-11: data processing apparatus; 
paragraph [0339], lines 2-6: attached host CPU, client) 

Nonaka discloses wherein storing the rights information and the first integrity hash at 
the client device; (see Nonaka paragraph [0246], lines 1-4: storage circuit for content 
key data; paragraph [0019], lines 1-6; paragraph [0019], lines 7-11: data processing 
apparatus; paragraph [0339], lines 2-6: attached host CPU, client) Nonaka does 
not specifically disclose whereby storing the rights information in a clear form 
However, Hall discloses: 

d) storing the rights information in a clear form; (see Hall col. 2, lines 7-14; col. 6, 
lines 12-16; col. 6, lines 28-32: digital rights management; col. 6, lines 19-22: 
clear form storage of digital rights information) 
It would have been obvious to one of ordinary skill in the art to modify Nanaka 
as taught by Hall to enable the capability for the storage of digital rights information 
in clear form. One of ordinary skill in the art would have been motivated to employ 
the teachings of Hall in order to enable the capability to ensure data structure 
integrity, flexibility, interoperability in the management of digital rights information. 
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(see Hall col. 1 , lines 34-37) 

Regarding Claim 21, Nonaka discloses the method of claim 20 further comprising: 

a) receiving a content key at the client device for the content; (see Nonaka 
paragraph [0026], lines 21-25: receive an encryption key at client device) 

b) encrypting the content key using the client device key to generate an encrypted 
content key; (see Nonaka paragraph [0026], lines 21-25: encryption utilized; 
paragraph [0036], lines 1-4: license (i.e. device) key utilized) and 

c) storing the encrypted content key on the client device, (see Nonaka paragraph 
[0246], lines 1-4: storage circuit for encrypted content key data; paragraph 
[0019], lines 1-6; paragraph [0019], lines 7-11: data processing apparatus; 
paragraph [0339], lines 2-6: attached host CPU, client) 

Regarding Claim 22, Nonaka discloses the method of claim 20 wherein obtaining the 
first integrity hash comprises: 

a) receiving the external key at the client device; (see Nonaka paragraph [0026], 
lines 21-25: receive key (i.e. session key) at client device) and 

b) generating the first integrity hash at the client device using the external key. (see 
Nonaka paragraph [0027], lines 1-7: generate integrity hash value at client 
device) 

Regarding Claim 23, Nonaka discloses the method of claim 20 wherein obtaining the 
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first integrity hash comprises: receiving the first integrity hash from a server device, (see 
Nonaka paragraph [0476], lines 1-4; paragraph [0525], lines 3-6: receive UCP (i.e. 
rights) information; paragraph [0019], lines 1-6; paragraph [0019], lines 7-11: data 
processing apparatus; paragraph [0339], lines 2-6: attached host CPU, server) 

Regarding Claim 24, Nonaka discloses the method of claim 20 wherein obtaining the 
second integrity hash comprises: 

a) receiving the second integrity hash from a server device; (see Nonaka paragraph 
[0476], lines 1-4; paragraph [0525], lines 3-6: receive UCP (i.e. rights) 
information; paragraph [0019], lines 1-6; paragraph [0019], lines 7-11: data 
processing apparatus; paragraph [0339], lines 2-6: attached host CPU, server) 
and 

b) receiving a key used by the server device to generate the second integrity hash, 
(see Nonaka paragraph [0026], lines 21-25: receiving key) 

Regarding Claim 26, Nonaka discloses the method of claim 20 further comprising: 

a) reading the rights information and the first integrity hash from the client device in 
the clear form out to a server device; (see Nonaka paragraph [0476], lines 1-4; 
paragraph [0525], lines 3-6: transfer (i.e. reading) UCP (i.e. rights) information)) 

b) generating a validation hash, using the external key, of at least the rights 
information read from the client device; (see Nonaka paragraph [0027], lines 1-7: 
generate integrity hash at client device; paragraph [0022], lines 1-5: external, 
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session key utilized) and 
c) comparing the validation hash to the first integrity hash to detect tampering, (see 
Nonaka paragraph [0246], lines 4-8: comparison hash values to detect 
tampering) 

Regarding Claim 27, Nonaka discloses the method of claim 20 further comprising: 

a) generating a validation hash from at least the rights information; (see Nonaka 
paragraph [0019, lines 1-6; paragraph [0019], lines 7-11: data processing 
apparatus (i.e. client device); paragraph [0027], lines 1-7: generate integrity 
hash) 

b) decrypting the encrypted hash using the client device key to recover the second 
integrity hash; (see Nonaka paragraph [0019], lines 1-6; paragraph [0021], lines 
3-8: decryption UCP (i.e. rights) information) and 

c) comparing the validation hash to the second integrity hash to detect tampering, 
(see Nonaka paragraph [0246], lines 4-8: comparison hash values to detect 
tampering) 

Regarding Claim 31, Nonaka discloses a method comprising: 

a) generating a validation hash from at least stored clear form rights information 
associated with content stored on a client device; (see Nonaka paragraph [0019, 
lines 1-6; paragraph [0019], lines 7-11: data processing apparatus (i.e. client 
device); paragraph [0027], lines 1-7: generate integrity hash; paragraph [0192], 
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lines 1-5; paragraph [0239], lines 1-3: data may be stored in an unencrypted 
(clear text) form) 

c) comparing the validation hash to the integrity hash to detect tampering with the 
rights information, (see Nonaka paragraph [0246], lines 4-8: comparison hash 
values to detect tampering) 

Nonaka discloses wherein decrypting an encrypted hash to recover an integrity hash 
using a client device key, said integrity hash having been previously generated from 
at least the stored rights information associated with the content; (see Nonaka 
paragraph [0019], lines 1-6; paragraph [0021], lines 3-8: decryption UCP (i.e. rights) 
information; paragraph [0346], lines 5-8: inaccessible secure device utilized for hash 
generation; paragraph [0192], lines 1-5; paragraph [0239], lines 1-3: data storage) 
Nonaka does not specifically discloses whereby stored clear form rights information. 
However, Hall discloses: 

b) stored clear form rights information; (see Hall col. 2, lines 7-14; col. 6, lines 12- 
16; col. 6, lines 28-32: digital rights management; col. 6, lines 19-22: clear form 
storage of digital rights information) 
It would have been obvious to one of ordinary skill in the art to modify Nanaka 
as taught by Hall to enable the capability for the storage of digital rights information 
in clear form. One of ordinary skill in the art would have been motivated to employ 
the teachings of Hall in order to enable the capability to ensure data structure 
integrity, flexibility, interoperability in the management of digital rights information, 
(see Hall col. 1 , lines 34-37) 
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Nonaka-Hall does not specifically disclose whereby a client device key that is 
externally inaccessible from the client device. However, Thoma discloses wherein a 
client device key that is externally inaccessible from the client device, (see Thoma 
paragraph [0005], lines 1-3: content distribution; paragraph [0031], lines 15-21; 
paragraph [0033], lines 5-9; paragraph [0033], lines 11-12: inaccessible key) 

It would have been obvious to one of ordinary skill in the art to modify Nonaka- 
Hall as taught by Thoma to enable the capability for an inaccessible key. One of 
ordinary skill in the art would have been motivated to employ the teachings of 
Thoma in order to enable the capability for the selection of the terminal device to 
receive distribute digital content from a wide variety of devices, (see Thoma 
paragraph [0012], lines 7-13) 

Regarding Claim 34, Nonaka discloses a client device comprising: 

c) hash circuitry to obtain an integrity hash of the rights information; ((see Nonaka 
paragraph [0019, lines 1-6; paragraph [0019], lines 7-11: data processing 
apparatus (i.e. client device); paragraph [0027], lines 1-7: generate (i.e. obtain) 
integrity hash) and 

d) encryption circuitry to encrypt the integrity hash using the client device key to 
generate an encrypted hash; (see Nonaka paragraph [0026], lines 21-25: 
encryption utilized; paragraph [0036], lines 1-4: license (i.e. device) key utilized) 

e) said memory to store the encrypted hash, (see Nonaka paragraph [0246], lines 1- 
4: storage circuit for encrypted content key data; paragraph [0019], lines 1-6; 
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paragraph [0019], lines 7-11: data processing apparatus; paragraph [0339], lines 
2-6: attached host CPU, client) 

Nonaka discloses wherein a memory to store content and rights information 
associated with the content, said memory being externally accessible; (see Nonaka 
paragraph [0246], lines 1-4: storage circuit for content key data; paragraph [0192], 
lines 1-5; paragraph [0239], lines 1-3: data storage) Nonaka does not specifically 
disclose whereby to store clear form rights information. 
However, Hall discloses: 

b) to store clear form rights information; (see Hall col. 2, lines 7-14; col. 6, lines 12- 
16; col. 6, lines 28-32: digital rights management; col. 6, lines 19-22: clear form 
storage of digital rights information) 
It would have been obvious to one of ordinary skill in the art to modify Nanaka 
as taught by Hall to enable the capability for the storage of digital rights information 
in clear form. One of ordinary skill in the art would have been motivated to employ 
the teachings of Hall in order to enable the capability to ensure data structure 
integrity, flexibility, interoperability in the management of digital rights information, 
(see Hall col. 1 , lines 34-37) 

Nonaka-Hall discloses wherein a register to store a client device key. (see Nonaka 
paragraph [0048], lines 1-4: register usage by data processing apparatus) Nonaka- 
Hall does not specifically disclose whereby being externally inaccessible from the 
client device. 
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However, Thoma discloses: 

a) said register for storing a client device key being externally inaccessible from the 
client device; (see Thoma paragraph [0005], lines 1-3: content distribution; 
paragraph [0031], lines 15-21; paragraph [0033], lines 5-9; paragraph [0033], 
lines 11-12: inaccessible key) 
It would have been obvious to one of ordinary skill in the art to modify Nonaka- 
Hall as taught by Thoma to enable the capability for an inaccessible key. One of 
ordinary skill in the art would have been motivated to employ the teachings of 
Thoma in order to enable the capability for the selection of the terminal device to 
receive distribute digital content from a wide variety of devices, (see Thoma 
paragraph [0012], lines 7-13) 



Regarding Claim 38, Nonaka discloses the client device of claim 34 wherein the 
integrity hash comprises a first integrity hash, the hash circuitry further to obtain a 
second integrity hash of the rights information, said memory to store the second 
integrity hash, (see Nonaka paragraph [0246], lines 1-4: storage circuit for content data; 
paragraph [0019], lines 1-6; paragraph [0019], lines 7-11: data processing apparatus; 
paragraph [0339], lines 2-6: attached host CPU, client) Nonaka does not specifically 
disclose whereby to store the second integrity hash in a clear form. However, Hall 
discloses wherein to store the second integrity hash in a clear form, (see Hall col. 2, 
lines 7-14; col. 6, lines 12-16; col. 6, lines 28-32: digital rights management; col. 6, lines 
1 9-22: clear form storage of digital rights information) 
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It would have been obvious to one of ordinary skill in the art to modify Nanaka as 
taught by Hall to enable the capability for the storage of digital rights information 
(integrity hash) in clear form. One of ordinary skill in the art would have been motivated 
to employ the teachings of Hall in order to enable the capability to ensure data structure 
integrity, flexibility, interoperability in the management of digital rights information, (see 
Hall col. 1, lines 34-37) 

Regarding Claims 39, 54, Nonaka discloses the method of claim 5 wherein obtaining 
the second integrity hash comprises: receiving the second integrity hash from a server 
device (see Nonaka paragraph [0476], lines 1-4; paragraph [0525], lines 3-6: receive 
hash, UCP (i.e. rights) information; paragraph [0019], lines 1-6; paragraph [0019], lines 
7-11: data processing apparatus; paragraph [0339], lines 2-6: attached host CPU, 
server), said server device having generated the second integrity hash using a server 
device key. (see Nonaka paragraph [0026], lines 21-25: encryption utilized; paragraph 
[0036], lines 1-4: license (i.e. device) key utilized; paragraph [0019], lines 1-6; 
paragraph [0019], lines 7-11: data processing apparatus; paragraph [0339], lines 2-6: 
attached host CPU, server) 

Regarding Claim 41, Nonaka discloses the client device of claim 34 wherein 

a) the encryption circuitry is to encrypt a content key for the content using the client 
device key to generate an encrypted content key; (see Nonaka paragraph [0026], 
lines 21-25: encryption utilized; paragraph [0036], lines 1-4: license (i.e. device) 
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key utilized) and 

b) the memory is to store the encrypted content key on the client device, ((see 
Nonaka paragraph [0246], lines 1-4: storage circuit (i.e. memory) for encrypted 
content key data; paragraph [0019], lines 1-6; paragraph [0019], lines 7-11: data 
processing apparatus; paragraph [0339], lines 2-6: attached host CPU, client)) 

Regarding Claim 44, Nonaka discloses the method of claim 1 further comprising: 
storing the rights information on the client device along with an encrypted hash, (see 
Nonaka paragraph [0246], lines 1-4: storage circuit for UCP (i.e. rights information), and 
content key data; paragraph [0019], lines 1-6; paragraph [0019], lines 7-11: data 
processing apparatus; paragraph [0339], lines 2-6: attached host CPU, client; 
paragraph [0192], lines 1-5; paragraph [0239], lines 1-3: data storage) Nonaka does 
not specifically disclose whereby storing the rights information in a clear form. 
However, Hall discloses wherein storing the rights information in a clear form, (see Hall 
col. 2, lines 7-14; col. 6, lines 12-16; col. 6, lines 28-32: digital rights management; col. 
6, lines 19-22: clear form storage of digital rights information) 

It would have been obvious to one of ordinary skill in the art to modify Nanaka as 
taught by Hall to enable the capability for the storage of digital rights information in a 
clear form. One of ordinary skill in the art would have been motivated to employ the 
teachings of Hall in order to enable the capability to ensure data structure integrity, 
flexibility, interoperability in the management of digital rights information, (see Hall col. 
1, lines 34-37) 
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Regarding Claim 47, Nonaka discloses the client device of claim 34 further comprising 
at least one of: 

a) an input port to download the rights information from a server device; (see 
Nonaka paragraph [0019], lines 7-10: interface (i.e. bus) for UCP (i.e. rights) 
information transfer) and 

b) a storage medium port to receive a storage medium having the rights information 
stored thereon, (see Nonaka paragraph [0246], lines 1-4: storage circuit for UCP 
(i.e. rights) information) 

Regarding Claim 48, Nonaka discloses the client device of claim 47 wherein the 
memory at least partially comprises the storage medium, (see Nonaka paragraph 
[0246], lines 1-4: storage circuit (i.e. memory) for content data) 

Regarding Claim 49, Nonaka discloses a machine readable medium having stored 
thereon machine executable instructions, the execution of which to implement a method 
comprising: 

c) obtaining an integrity hash of the rights information; (see Nonaka paragraph 
[0019, lines 1-6; paragraph [0019], lines 7-11: data processing apparatus (i.e. 
client device); paragraph [0027], lines 1-7: generate (i.e. obtain) integrity hash) 

d) encrypting the integrity hash using the client device key to generate an encrypted 
hash; (see Nonaka paragraph [0026], lines 21-25: encryption utilized; paragraph 
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[0036], lines 1-4: license (i.e. device) key utilized) and 
e) storing the encrypted hash on the client device, (see Nonaka paragraph [0246], 
lines 1-4: storage circuit for encrypted content key data; paragraph [0019], lines 
1-6; paragraph [0019], lines 7-11: data processing apparatus; paragraph [0339], 
lines 2-6: attached host CPU, client) 

Nonaka disclose wherein receiving rights information at a client device, said rights 
information being associated with content stored on the client device, said client 
device having a client device key and storing the rights information on the client 
device, (see Nonaka paragraph [0476], lines 1-4; paragraph [0525], lines 3-6: 
transfer UCP (i.e. rights) information; paragraph [0346], lines 5-8: inaccessible 
secure device utilized for hash generation; paragraph [0192], lines 1-5; paragraph 
[0239], lines 1-3: data storage) Nonaka does not specifically disclose whereby 
receiving clear form rights information, and storing the rights information in a clear 
form. 

However, Hall discloses: 

a) receiving clear form rights information, (see Hall col. 2, lines 7-14; col: 6, lines 
12-16; col. 6, lines 28-32: digital rights management; col. 6, lines 19-22: clear 
form storage of digital rights information) 

b) storing the rights information in a clear form; (see Hall col. 2, lines 7-14; col. 6, 
lines 12-16; col. 6, lines 28-32: digital rights management; col. 6, lines 19-22: 
clear form storage of digital rights information) 

It would have been obvious to one of ordinary skill in the art to modify Nanaka 
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as taught by Hall to enable the capability for the receipt and storage of digital rights 
information in clear form. One of ordinary skill in the art would have been motivated 
to employ the teachings of Hall in order to enable the capability to ensure data 
structure integrity, flexibility, interoperability in the management of digital rights 
information, (see Hall col. 1, lines 34-37) 

Nonaka-Hall does not specifically disclose whereby a client device key that is 
externally inaccessible from the client device. However, Thoma discloses wherein a 
client device key that is externally inaccessible from the client device, (see Thoma 
paragraph [0005], lines 1-3: content distribution; paragraph [0031], lines 15-21; 
paragraph [0033], lines 5-9; paragraph [0033], lines 11-12: inaccessible key) 

It would have been obvious to one of ordinary skill in the art to modify Nonaka- 
Hall as taught by Thoma to enable the capability for an inaccessible key. One of 
ordinary skill in the art would have been motivated to employ the teachings of 
Thoma in order to enable the capability for the selection of the terminal device to 
receive, distribute digital content from a wide variety of devices, (see Thoma 
paragraph [0012], lines 7-13) 

Regarding Claim 59, Nonaka discloses the method of claim 49 wherein the rights 
information grants unlimited play for the content on the client device, (see Nonaka 
paragraph [0246], lines 1-4: storage circuit for UCP (i.e. rights information), and content 
key data; paragraph [0019], lines 1-6; paragraph [0019], lines 7-11: data processing 
apparatus; paragraph [0339], lines 2-6: attached host CPU, client; paragraph [0362], 
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lines 1-2; paragraph [0477], lines 1-3: unrestricted (unlimited) playback) 

6. Claims 5, B, 25, 40, 53, 55 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Nonaka-Hall-Thoma and further in view of Serret-Avila et al. (US 
Patent No. 6,959,384). 

Regarding Claims 5, 53, Nonaka discloses the method of claim 1 wherein the integrity 
hash comprises a first integrity hash, the method further comprising: 

storing the integrity hash on the client device, (see Nonaka paragraph [0246], lines 
1-4: storage circuit for content key data (i.e. first or second integrity hash); paragraph 
[0019], lines 1-6; paragraph [0019], lines 7-11: data processing apparatus; 
paragraph [0339], lines 2-6: attached host CPU, client) 

Nonaka does not specifically disclose whereby storing the integrity hash in a clear 
form. 

However, Hall discloses: 

b) storing the integrity hash in a clear form, (see Hall col. 2, lines 7-14; col. 6, lines 
12-16; col. 6, lines 28-32: digital rights management; col. 6, lines 19-22: clear 
form storage of digital rights information) 
It would have been obvious to one of ordinary skill in the art to modify Nanaka 
as taught by Hall to enable the capability for the storage of digital rights information 
in clear form. One of ordinary skill in the art would have been motivated to employ 
the teachings of Hall in order to enable the capability to ensure data structure 
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integrity, flexibility, interoperability in the management of digital rights information, 
(see Hall col. 1, lines 34-37) 

Nonaka-Hall does specifically disclose the capability to generate a second integrity 
hash using a first integrity hash. 
However, Serret-Avila discloses: 

a) obtaining a second integrity hash of the rights information; (see Serret-Avila col.4, 
lines 43-49; col. 5, lines 2-11: integrity hash generation using input hash value) 
It would have been obvious to one of ordinary skill in the art to modify Nonaka- 
Hall as taught by Serret-Avila to enable the capability to generate a second integrity 
hash. One of ordinary skill in the art would have been motivated to employ the 
teachings of Serret-Avila in order to enable a relatively fast, secure, and efficient 
authentication of data streams, (see Serret-Avila col. 2, line 66 - col. 3, line 3: "... a 
need for systems and methods that overcome some or all of these limitations by 
providing relatively fast, secure, and efficient authentication of data streams and 
other electronic content . . . ") 

Regarding Claim 6, Nonaka discloses the method of claim 5 wherein obtaining the 
second integrity hash comprises: receiving the second integrity hash from a server 
device (see Nonaka paragraph [0476], lines 1-4; paragraph [0525], lines 3-6: receive 
hash, UCP (i.e. rights) information; paragraph [0019], lines 1-6; paragraph [0019], lines 
7-11: data processing apparatus; paragraph [0339], lines 2-6: attached host CPU, 
server), said server device having generated the second integrity hash using a server 
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device key. (see Nonaka paragraph [0026], lines 21-25: encryption utilized; paragraph 
[0036], lines 1-4: license (i.e. device) key utilized; paragraph [0019], lines 1-6; 
paragraph [0019], lines 7-11: data processing apparatus; paragraph [0339], lines 2-6: 
attached host CPU, server) 

Regarding Claims 7, 40, 55, Nonaka discloses the method of claim 5 wherein 

obtaining the first integrity hash comprises: 

applying the client device key in a combination with the rights information and the 
second integrity hash, and determining the first integrity hash from the combination 
of the rights information, the second integrity hash, and the client device key. (see 
Nonaka paragraph [0026], lines 21-25: encrypt data UCP (i.e. rights) information; 
paragraph [0036], lines 1-4: license key usage) Nonaka does specifically disclose 
the capability to generate a second integrity hash using a first integrity hash. 
However, Serret-Avila discloses: 

a) applying the client device key in a combination with the rights information and the 
second integrity hash; and (see Serret-Avila col.4, lines 43-49; col. 5, lines 2-11: 
integrity hash generation using input hash value) 

b) determining the first integrity hash from the combination of the rights information, 
the second integrity hash, and the client device key. (see Serret-Avila col.4, 
lines 43-49; col. 5, lines 2-11: integrity hash generation using input hash value) 

It would have been obvious to one of ordinary skill in the art to modify Nonaka 
as taught by Serret-Avila to enable the capability to generate a second integrity 
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hash. One of ordinary skill in the art would have been motivated to employ the 
teachings of Serret-Avila in order to enable a relatively fast, secure, and efficient 
authentication of data streams, (see Serret-Avila col. 2, line 66 - col. 3, line 3) 

Regarding Claim 25, Nonaka discloses the method of claim 20 wherein obtaining the 
second integrity hash comprises: generating the integrity hash at the client device, (see 
Nonaka paragraph [0019, lines 1-6; paragraph [0019], lines 7-11: data processing 
apparatus (i.e. client device); paragraph [0027], lines 1-7: generate integrity hash) 
Nonaka does specifically disclose the capability to generate a second integrity hash 
using a first integrity hash. However, Serret-Avila discloses wherein generating the 
second integrity hash using the client device key as an integrity secret, (see Serret- 
Avila col.4, lines 43-49; col. 5, lines 2-11: integrity hash generation using input hash 
value) 

It would have been obvious to one of ordinary skill in the art to modify Nonaka as 
taught by Serret-Avila to enable the capability to generate a second integrity hash. One 
of ordinary skill in the art would have been motivated to employ the teachings of Serret- 
Avila in order to enable a relatively fast, secure, and efficient authentication of data 
streams, (see Serret-Avila col. 2, line 66 - col. 3, line 3) 

7. Claims 10, 32, 33, 43, 58 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Nonaka-Hall-Thoma and further in view of Chase, Jr et al. (US 
Patent No. 7,080,043). 
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Regarding Claims 10, 32, 43, 58, Nonaka discloses the method of claim 9. (see 
Nonaka paragraph [0246], lines 4-8: comparison of hash values to detect tampering) 
Nonaka does not specifically disclose disabling the content on the client device if 
tampering is detected. However, Chase discloses wherein disabling the content on the 
client device if tampering is detected, (see Chase col. 3, lines 60-63: usage request; col. 
4, lines 10-16; col. 33, lines 54-56; col. 33, lines 60-63; col. 34, lines 4-9: content 
compromised such as tampering, access to content disabled) 

It would have been obvious to one of ordinary skill in the art to modify Nonaka as 
taught by Chase to enable the capability to disable access to content. One of ordinary 
skill in the art would have been motivated to employ the teachings of Chase in order to 
efficiently manage the rights attached to digital data such as the capability to revoke 
content if compromised, and add or remove a particular right, (see Chase col. 2, lines 
47-51 : "... a need exists for a method and mechanism that allows a content owner to 
revoke all rights of a user to render a piece of content such as for example if the 
content owner learns that security with respect to such content has been breached. 
More generally, a need exists for a method and mechanism that allows a content owner 
to modify a license of the user to update rights of the user to render a piece of content, 
such as for example to extend an expiration date, adjust a play count, add or remove a 
particular right, etc. ... ") 

Regarding Claim 33, Nonaka discloses the method of claim 31 further comprising: 
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wherein to initiate generation of the validation hash and comparison to the integrity 
hash, (see Nonaka paragraph [0027], lines 1-7: generation of validation hash; 
paragraph [0246], lines 4-8: comparison hash values to detect tampering). Nonaka 
does not specifically disclose the capability to disable content. 
However, Chase discloses: 

a) receiving a usage request for the content stored at the client device, said usage 
request; (see Chase col. 3, lines 60-63: usage request; col. 4, lines 10-16; col. 
33, lines 54-56; col. 33, lines 60-63; col. 34, lines 4-9: content compromised, 
access to content disabled) and 

b) permitting usage only if the content is not disabled, (see Chase col. 4, lines 10- 
16; col. 33, lines 54-56; col. 33, lines 60-63; col. 34, lines 4-9: content 
compromised, access to content disabled) 

It would have been obvious to one of ordinary skill in the art to modify Nonaka 
as taught by Chase to enable the capability to disable content. One of ordinary skill 
in the art would have been motivated to employ the teachings of Chase in order to 
efficiently manage the rights attached to digital data such as the capability to revoke 
content if compromised, and add or remove a particular right, (see Chase col. 2, 
lines 47-51) 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Carlton Johnson whose telephone number is 571-270- 
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1032. The examiner can normally be reached Monday through Friday from 8:00AM to 
5:00PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Nassar Moazzami, can be reached on 571-272-4195. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 
273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published 
applications may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through Private PAIR only. For 
more information about the PAIR system, see http://pair-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll-free). 
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